111 application security jobs at 62 companies in Pennsylvania
2mo
Save
Mark Applied
Hide
2mo
Application Security Engineer
Harrisburg, Pennsylvania, United States
OnsiteFull Time
D&H Distributing: Distributes technology products and IT solutions to resellers.
3+ YOEDesigns and implements secure software practices; assesses application security; supports SDLC; proficient in at least one programming language; familiar with OWASP Top 10; experience with security assessments and vendor security.
The Wolfe Companies: Provides comprehensive gift card management and fintech gifting solutions.
2+ YOE2+ years in application security/DevSecOps or software development with security exposure; coding background; CI/CD and secure-coding knowledge; bachelor\u0002s degree in related field (or equivalent experience).
Snyk, SemGrep, Cycode, GitHub, GitLab, Jenkins, AWS DevOps, OWASP, SANS CWE Top 25, DSOMM, BSIMM, AI/ML, LLM
Quincy or Princeton or Berwyn or Clifton or Austin
$120k-$203k/yrHybridFull Time
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
14+ YOEDesign and review secure architectures for applications, APIs, cloud-native and AI systems; conduct threat modeling and risk assessments; embed secure-by-design, DevSecOps, and AI security practices.
Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Kubernetes, CI/CD, DevSecOps, Infrastructure as Code (IaC), SAST, DAST, IAST, software composition analysis (SCA), OWASP Top 10
SolventumNYSE: SOLV: Provides medical technology and health information software solutions.
7+ YOEBachelor's degree with 7+ years in application security, 3+ years administering DAST tools, experience with AWS/Azure, RESTful API testing (Postman/Swagger), Python scripting, and ability to obtain Public Trust clearance.
DAST, Python, AWS, Azure, Postman, Swagger, Qualys, Tenable, OWASP Top 10, NIST 800-53, FedRAMP, HITRUST, SOC II, GDPR
Vanguard: Provides mutual funds, ETFs, and investment management services.
Undergraduate degree or equivalent; strong experience with DAST and CI/CD integration; familiarity with SAST, SCA, IAST, RASP, secure SDLC, and standards such as NIST, OWASP, MITRE.
EnerSysNYSE: ENS: Global provider of industrial batteries and stored energy solutions.
5+ YOE5+ years in information security with 3+ years in application security, secure development, or DevSecOps; strong knowledge of OWASP and secure SDLC; hands-on with security testing tools; cloud security experience; ability to collaborate across teams.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yrHybridFull Time
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
Atlanta or Tampa or Charlotte or Austin or Chicago or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or California or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
4+ YOEBachelor's degree, 4+ years of experience, strong Workday application security and compliance skills, analytical thinking, leadership and mentoring experience; SAP experience noted as a specialism.
University of Pennsylvania: Provides Ivy League higher education and conducts advanced scientific research.
1+ YOEBachelor's degree and 1–2 years experience (or equivalent), develops and maintains application software and interfaces, provides application support, ensures data integrity and security, may manage small projects.
University of Pennsylvania: Research university offering higher education and healthcare services.
1+ YOEBachelor's degree and 1–2 years experience; develops and maintains application software, translates requirements into technical solutions, administers applications, ensures data integrity/security, and may manage small projects.
Phoenix Contact: Produces components for electrical engineering and industrial automation.
7+ YOEBachelor's in engineering, 7+ years application or network engineering experience, deep Industrial Ethernet and network architecture knowledge, IEC/ISA 62443 familiarity, relevant networking/security certifications preferred, willingness to travel up to 30%.
Victaulic: Manufacturer of mechanical pipe joining and flow control systems.
0+ YOE0–2 years in information security, IT audit, or risk; familiarity with NIST CSF, ISO/IEC 27001, CMMC, and NIS2; experience with risk assessments, third-party audits, cloud/DevOps/application security; CompTIA Security+ or equivalent; CISA preferred.
PMHCC: Provides administrative and management services for public behavioral health programs.
3+ YOE3+ years .NET development experience; proficiency with C#, ASP.NET Core/MVC/Web API, Microsoft SQL Server, secure coding and HIPAA compliance; strong communication and problem-solving skills.
C#, ASP.NET Core, Razor Pages, MVC, Web API, HTML, CSS, JavaScript, Microsoft SQL Server, Git, Azure DevOps, Azure Boards, ASP.NET Core Identity, Azure AD (Entra ID), RESTful APIs